Stack-Example: Replacement of the docker.sock with a socket proxy

[mr-bolle]

I have replace the volume mount for the dockge container, and use a separate socket proxy service.
I don't want to use a global socket-proxy, thats why i add the socket-proxy into the dockge stack.

The reason, so i can better control the permission.

What do you thing?

version: "3.8"
services:
# https://github.com/Tecnativa/docker-socket-proxy/discussions/57
  socket-proxy:
    container_name: socket-proxy-dockge
    image: tecnativa/docker-socket-proxy
    restart: always
    # networks:
    #   socket_proxy:
    #     ipv4_address: xyz
    privileged: true
    # ports:
    #   - "127.0.0.1:2375:2375"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
    environment:
      - LOG_LEVEL=debug # debug,info,notice,warning,err,crit,alert,emerg
      ## Variables match the URL prefix (i.e. AUTH blocks access to /auth/* parts of the API, etc.).
      # 0 to revoke access.
      # 1 to grant access.
      ## Granted by Default
      # - EVENTS=1
      # - PING=1
      # - VERSION=1
      # # Security critical
      - AUTH=0
      - SECRETS=0
      - POST=1          # dockge 
      # # Not always needed      
      - BUILD=0
      - COMMIT=0
      - CONFIGS=0
      - CONTAINERS=1    # dockge, Portainer, Traefik
      - DISTRIBUTION=0
      - EXEC=1          # dockge (run Container Shell)
      - IMAGES=1        # dockge, Portainer
      - INFO=1          # dockge, Portainer
      - NETWORKS=1      # dockge, Portainer
      - NODES=0
      - PLUGINS=0
      - SERVICES=1      # dockge, Portainer
      - SESSION=0
      - SWARM=0
      - SYSTEM=1
      - TASKS=1
      - VOLUMES=1

  dockge:
    image: louislam/dockge:1
    container_name: dockge
    depends_on:
      - socket-proxy
    restart: unless-stopped
    ports:
      - 5001:5001
    volumes:
      # - /var/run/docker.sock:/var/run/docker.sock   # use the docker.sock from the socket-proxy
      - ./data:/app/data
      # Stacks Directory
      # ⚠️ READ IT CAREFULLY. If you did it wrong, your data could end up writing into a WRONG PATH.
      # ⚠️ 1. FULL path only. No relative path (MUST)
      # ⚠️ 2. Left Stacks Path === Right Stacks Path (MUST)
      - /opt/stacks:/opt/stacks
    environment:
      # Tell Dockge where to find the stacks
      - DOCKGE_STACKS_DIR=/opt/stacks
      - DOCKER_HOST=tcp://socket-proxy-dockge:2375

[DragonHeart69]

thanks, this ENV is what I was looking for. This might be in the docs somewhere.